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SYSTEM AND METHOD FOR A TROUBLE SHOOTING PORTAL 
TO ALLOW TEMPORARY MANAGEMENT ACCESS TO A 
COMMUNICATION DEVICE 

5 

CLAIM OF PRIORITY 

This application claims priority to copending U.S. provisional application entitled, 
"SYSTEM AND METHOD FOR A TROUBLESHOOTING "PORTAL" TO ALLOW 
TEMPORARY MANAGEMENT ACCESS TO A DEVICE BY A SERVICE 

10 PROVIDER WHEN ACCESS PROVIDER'S NETWORK TOPOLOGY IS A LINK 
LAYER OR NETWORK LAYER TOPOLOGY " having ser. no. 60/181,633, filed 
February 10, 2000, and having attorney docket number 61606-8500 (2000-03), which is 
entirely incorporated herein by reference, and copending U.S. provisional application 
entitled, "SYSTEM AND METHOD FOR A TROUBLESHOOTING "PORTAL" TO 

15 ALLOW TEMPORARY MANAGEMENT ACCESS TO A DEVICE BY A SERVICE 
PROVIDER WHEN THE ACCESS PROVIDER'S NETWORK TOPOLOGY IS A 
LINK LAYER OR NETWORK LAYER TOPOLOGY " having ser. no. 60/181,633, filed 
March 1, 2000, and having attomey docket number 61606-8380 (2000-03), which is 
entirely incorporated herein by reference. 

20 

TECHNICAL FIELD 

The present invention relates generally to data communications, and more 
particularly, to a system and method for a troubleshooting portal which allows temporary 
management access by a service provider to a device residing on an access provider 
25 network. 

BACKGROUND OF THE INVENTION 

In the field of data communications, communication equipment such as a modem, 
a data service unit (DSU), or a channel service unit (CSU) is used to convey information 
30 from one location to another. Digital technology now enables modems or other 
communication devices, such as frame relay data service units (DSU's), frame relay 
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access units (FRAU's), and asynchronous transfer mode (ATM) communication devices 
to communicate large amounts of data in a packetized digital format. This packetized 
digital communication format generally adheres to a model, such as the well known Open 
Systems Interconnect (OSI) seven-layer model, which specifies the parameters and 

5 conditions under which information is formatted into a digital data packet and transferred 
over a communications network. 

Frame relay networks, well known in the art, are one implementation of a packet- 
switching network. A packet-switching network allows multiple users to share data 
network facilities and bandwidth, as contrasted with a circuit-switching network which 

10 provides a specific amount of dedicated bandwidth to each user. Packet switches divide 
bandwidth into virtual circuits (VC). Virtual circuits, also known as circuit identifiers, 
can be a permanent virtual circuit (PVC) or a switched virtual circuit (SVC). As is well 
known, virtual circuit bandwidth is consumed only when data is actually transmitted. 
Otherwise, the bandwidth is not used. In this way, packet-switching networks essentially 

15 mirror the operation of a statistical multiplexer (whereby multiple logical users share a 
single network access circuit). Frame relay systems generally operate within layer 2 (the 
data link layer) of the OSI model, and are an improvement over previous packet 
switching techniques, such as X.25, in that a firame relay system requires significantly 
less control overhead. 

20 FIG. 1 illustrates a communication environment 22 having an access provider 

network 24 and a service provider network 26. Typically, communication environment 
22 would have a plurality of networks (not shown) interconnected together via 
communication links as described hereinafter. An example of a network is the pubhc 
switched telephone network (PSTN) or a public data network (PDN). Access to the 

25 network is provided by an access provider. These access providers generally provide the 
communication and switching facilities over which the above-mentioned communication 
devices operate. Because of the evolution of the communication system from a plain old 
telephony system (POTS), originally designed to handle analog voice communications, to 
today's communication network capable of operating over a variety of physical 

30 connection systems using a variety of communication formats, the communication 
system employed today which provides botii analog POTS voice capabiHty and digital 
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data capability is quite complex. Often, special interface devices are needed to provide 
connectivity between the different types of communication hardware and information 
formats. For example, a user of a digital data system for accessing the Internet may be 
employing an entirely different technology than the communication system employed by 
5 access provider network 24 which may be employing an ATM based communication 
network. 

Typically, a user contracts with a network service provider (NSP) for network 
services. These networks typically sell network services, in the form of connectivity, to 
users. As illustrated in FIG. 1, the service provider's network 26 is shown to be separate 

10 from and adjacent to the access provider network 24. In instances where the user has 
contracted with the access provider for service, the access provider would also be the 
network service provider. On the other hand, the access provider and the NSP may be 
different entities. In this situation, the NSP may be far removed from the user, and 
connectivity between the user and the network service provider may be provided through 

1 5 one or more different access provider networks (not shown). Therefore, one skilled in the 
art will realize that FIG. 1 is provided as a simphfied illustrative example of a portion of 
a communication environment 22. 

A user may purchase a particular level of service from the NSP (not shown). This 
level of service can be measured by, for example, network availability as a percentage of 

20 total time on the network, the amount of data actually delivered through the network 
compared to the amount of data attempted or possibly the network latency, or the amount 
of time it takes for a particular communication to traverse the network. Often, an NSP 
may provide services to the user by specifying a committed information rate (CIR). The 
CIR is the minimum data communication rate that the NSP guarantees to the user. The 

25 CIR is typically some fraction of the total available line rate of the particular service 
being provisioned. For example, in a frame relay network, the Kne rate may be 1536000 
bits/second (Tl rate including 24 64-kilobit (KB) channels for a total of 1.544 
megabits/second (MB/s) including 8KB signahng), while the CIR may be 48000 
bytes/second (384000 bits/second (b/s)). That is, for this example, the NSP may 

30 guarantee a communication rate of 384000 b/s, while the total available line rate may be 
1536000 b/s. 

3 
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FIG. 1 shows a simplified illustrative communication environment 22 in which a 
plurality of user devices 28 and 30 reside. Each user device 28 and 30, are connected to a 
communication device 32 and 34, respectively, such as a frame relay or ATM access unit, 
via connections 36 and 38, respectively. User devices 28 and 30 are typically customer 

5 premises equipment, such as routers or the like, which may be connected to a local area 
network (LAN) or the like and residing off the access provider network 24. One skilled 
in the art will reahze that the above-described communication devices and user devices 
may be of any of a wide variety of devices commonly employed in the industry. 

For simplicity and as an example, only two communication devices 32 and 34, are 

10 depicted in FIG. 1. In practice, a communication environment 22 will contain many 
communication devices. Communication devices 32 and 34 are commonly considered 
communication endpoints and communicate with each other over an access provider 
network 24, in a conventional manner. The term communication device and endpoint are 
intended to be equivalent and are used interchangeably hereinafter. Access provider 

15 network 24 can be, for example, any network that provides connectivity for 
communication devices 32 and 34, and in the simplified illustrative example of FIG. 1, 
the portion of the access provider network shown is an ATM communication network. 
Access provider network 24 illustratively connects to communication devices 32 and 34 
over connections 40 and 42, respectively. Connections 40 and 42 can be physical links 

20 and can be, for example but not limited to, Tl/El service, digital subscribe loop (DSL), 
or any digital data service (DDS). 

Access provider network 24 and NSP network 26 are typically characterized by a 
mesh network of links interconnecting a matrix of intermediate nodes (not shown) 
through switches, such as switches 46, 48, 50, 52, 54 and 56, which are well known in the 

25 art. Communication links provide the physical connections between switches. For 
example, link 58 connects switches 46 and 48. Other links 60, some of which are shown 
as dotted lines for illustrative purposes, provide physical connections between other 
switches. For simplicity and as an example, only a limited number of switches and links 
are illustrated herein; however, access provider network 24 and NSP network 26 will 

30 typically contain many switching devices and links. 
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An operations center (OC) 62 is shown residing in access provider network 24. 
Within the OC 62 resides some of the control facilities necessary to maintain and operate 
the access provider network 24. As an illustrative example, a computer terminal 64 is 
shown residing in the OC 62. Computer terminal 64 interfaces with access unit 68 via 
5 connection 70 to provide an access provider operator management access to the various 
components of the access provider network 24. For further illustrative purposes, access 
unit 68 in OC 62 is shown connected to switch 52 via link 72 and connected to switch 48 
over link 74. Additional links 60 may be used to connect to other switches throughout 
the access provider network 24 as necessary for the maintenance and operation of the 

10 access provider network 24. One skilled in the art will appreciate that an OC 62 will 
likely contain many computer terminals, switches and links which are not shown in the 
simphfied illustrative example of FIG. L 

FIG. 1 also illustrates a simplified NSP network 26. This simphfied NSP network 
26 is shown to have one switch 76. Also shown residing in the simphfied NSP network 

15 26 is an operations center (OC) 78. Residing in OC 78 is computer terminal 80 which 
interfaces with access unit 82 via line 84. Access unit 82 is connected to switch 76 via 
link 86. Connectivity between NSP network 26 is provided by hnk 88, which connects 
switch 76 with switch 48. Similar to access provider network 24, NSP network will 
likely have many computer terminals, switches, access units and hnks (not shown). 

20 As part of the contract between a user and the NSP (not shown), a service contract 

may provide for servicing of the user's communication devices or other communication 
facilities which provide connectivity for the user to the access provider network 24 and/or 
NSP network 26. If the contract provides for a fully managed service, the NSP operator, 
typically working at the NSP's OC 78, would access the communication device on a 

25 regular basis to ensure the proper functioning of the communication device. If the access 
provider and the network provider are the same entity, then the access provider operator 
can easily establish access to a communication device through access provider network 
24. For example, if the owner of user device 28 has contracted with the access provider, 
then access provider operator working out of OC 62 may access communication device 

30 32 from computer terminal 64 by establishing a VC path from switch 68 to switch 48 via 
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link 74, from switch 48 to switch 46 via Unk 58, and from switch 46 to communication 
device 32 over link 40. 

Individual links in a frame-relay network are typically defined by data Unk 
connection identifiers (DLCIs), which are commonly used to identify the logical 

5 connection over which data communications are transported. PVCs are virtual circuits 
employed in an asynchronous transfer mode (ATM) network and/or a frame relay system. 
The use of frame relay DLCIs allows multiple logical connections to be multiplexed over 
the same channel. Alternatively, in the case of an ATM network, virtual path 
identifiers/virtual channel identifiers (VPWCIs) are used to identify the logical 

10 connection over which the data is transported. Here, in this simplified illustrative 
example of establishing connectivity between OC 62 and communications device 32, a 
series of VPWCIs would define the path 90 between switch 68 and communication 
device 32. The VPI/VCIs are shown as dash, double-dotted lines between the switches 
and parallel to the links to which a virtual circuit has been assigned. The series of frame 

15 relay DLCIs and/or ATM VPWCIs form a single path referred to as a virtual circuit 
(VC). A virtual circuit may be a permanent virtual circuit (PVC) such that the circuit is 
permanently estabhshed, or the VC may be a switched virtual circuit (SVC) which may 
be established as needed. In this simplified illustrative example where the owner of user 
device 28 has contracted with the access provider for network service, access provider 

20 operator working in OC 62 can access communication device 32 over VC path 90 (as 
denoted by the series of VPWCIs and/or DLCIs) to provide for the contracted services. 
For example, the access provider operator may be interested in assessing the performance 
of communication device 32 to determine if there are any dropped frames, if there is any 
bursting above CIR by the customer, and/or if there are any linked management interface 

25 (LMI) problems at a switch. 

Alternatively, the owner of user device 28 may have contracted with a network 
service provider who is not the access provider. As shown in the simpUfied 
communication environment 22 of FIG. 1, the contracted network services may have to 
be provided from NSP network 26 through access provider network 24. In this situation, 

30 an NSP operator working from OC 78 may have to access conamunication device 32. 
The NSP operator would first have to contact the access provider operator working in OC 
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62, via communications path 94, with a request to estabhsh connectivity between switch 
50 and communication device 28. Here, a communications path 94 is shown connecting 
OC 78 with OC 62. Connection 94 could be a POTS telephone line, a microwave 
channel, a satellite link, a radio channel or other commonly employed communication 
means. Then, VC 92 is established from switch 82 residing in OC 78 to the 
communication device 32. Li this illustrative example, the VC 93 would be established 
over links 86, 88, 58 and 40. VC 92 may be either a PVC or an SVC depending upon a 
variety of factors, such as the nature of the agreement between the NSP and the access 
provider. 

This process of manually requesting and then establishing a VC 92 from the NSP 
26 to communication device 32 through an access provider's network 24 creates several 
problems and inefficiencies. First, it takes time for NSP operator to contact the access 
provider operator to request the estabhshment of PVC 92. This time equates to personnel 
expenses and inefficient use of personnel time. Furthermore, either operator may be 
needlessly distracted from higher priority tasks when initiating or responding to requests 
to estabUsh PVC 92. 

Also, the access provider operator may need to verify that the request to estabhsh 
PVC 92 is authorized. That is, it would be undesirable for the access provider to allow 
unauthorized access to communication device 32. Verification of the requesting parties' 
authority to access communication device 32 equates to an added cost and additional 
personnel time inefficiencies. 

Additionally, manual establishment of VC 92 requires time and effort from the 
access provider operator, thereby resulting in another inefficient use of personnel time 
and money. 

A related problem arises from the inefficient use of Internet Protocol (IP) 
addresses. When a large number of communication devices and their associated VCs are 
to be estabhshed and maintained on an on-going basis, a corresponding large number of 
IP addresses are utilized. Given that there are a hmited number of IP addresses available, 
there is a need to provide the necessary access to communication devices without the 
associated inefficient use of DP addresses. 
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A related problem may be imposed upon the user. When the user is not able to 
communicate at CIR, the user may begin incurring costs associated with the degraded 
performance. The user will likely then contact the NSP operator to complain about the 
degraded service and request remedial actions to fix the problem. Because establishing 

5 VC 92 is a time consuming and labor intensive process, a substantial length of time may 
be required before the user's service level is re-estabhshed up to the CIR. Therefore, the 
user may incur costs associated with the degraded performance until the NSP (not shown) 
has accessed the communication device, diagnosed the problem, and completed remedial 
actions. Reducing the time period to implement remedial actions would benefit the user. 

10 Therefore, it would be desirable to provide a quick, reliable, efficient, and 

inexpensive method to establish a VC between a network service provider and a 
customer. 

SUMMARY OF THE INVENTION 

15 The present invention provides a system and method which utilizes a 

troubleshooting portal to instruct a switch in a communication system to provide a 
connection between a first communication device residing in an access provider network 
and a second communication device residing in a network service provider (NSP) 
network. An NSP operator establishes a session with the troubleshooting portal, typically 

20 residing in an access provider's network. The troubleshooting portal verifies that the 
NSP operator is authorized to have access to the requested communication device. After 
authorization is verified, one embodiment of the troubleshooting portal routes 
management traffic between the NSP operator and a digital subscriber loop access 
multiplexer (DSLAM) or similar switching device which uses a single VC fi*om the 

25 access provider operation center to the DSLAM or switching device. The DSLAM or 
switching device then routes the management traffic to the desired communication 
device. Another embodiment of the troubleshooting portal instructs a switch to couple a 
virtual circuit (VC) defining a connection between the NSP operator and a predefined 
switch residing in the access provider system with a predefined VC defining a path 

30 between the predefined switch and the requested communication device. Additionally, 
the NSP operator may specify an internet protocol (IP) address to be associated with the 
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requested endpoint. Once the troubleshooting portal has enabled connectivity between 
the NSP operator and the requested communication device, the NSP operator can conduct 
the necessary troubleshooting tests and other service functions via the portal connection 
as required by the contract arrangement between the NSP and the owner of the 

5 communication device. 

The troubleshooting portal allows the access provider to predefine a plurality of 
VCs associated with a plurality of communication devices that NSPs should have access 
to on an occasional or a frequent basis. In the preferred embodiment, an address table or 
the like would reside in a memory residing in the troubleshooting portal. Once endpoints 

1 0 are associated with circuit identifiers and VCs in the address table, access providers will 
not be disturbed or distracted from their work when an NSP operator desires to establish 
connectivity to a communication device. The NSP operator estabUshes a session with the 
troubleshooting portal that automatically provides connectivity between the NSP operator 
and any one of the plurality of communication devices. The NSP operator need only 

15 specify a circuit identifier or some other suitable endpoint identifier to the 
troubleshooting portal. The address table may associate the circuit identifier specified by 
the NSP operator with an IP address from the access provider's domain which has been 
permanently assigned to the endpoint. If no permanent IP address has been assigned to 
the endpoint by the access provider, an IP address could then be selected from a pool of 

20 reusable IP addresses and assigned to the endpoint for the duration of the session. 

Alternative embodiments of a troubleshooting portal would provide for a plurality 
of NSPs having access to a plurality of communication devices cormected to the access 
provider system. Another alternative embodiment of the troubleshooting portal would 
provide for a plurality of portal servers sharing a common external address table for 

25 purposes of load balancing and redundancy. 

A security feature employed by an alternative embodiment of the troubleshooting 
portal would allow any particular NSP operator to have access only to those 
communication devices for which the operator is authorized to access. This alternative 
embodiment would limit access to any particular communication device to only the NSP 

30 operator for which a service contract exists. Unauthorized access by other operators 
would be prevented. 
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An alternative embodiment of the troubleshooting portal may provide for access 
provider operators to establish connections with communication devices having 
predefined ff addresses residing in the above-described address table. Another 
alternative embodiment of the troubleshooting portal would employ network address 
translation (NAT) such that the address table residing in the troubleshooting portal would 
be able to associate circuit identifiers (ID) provided by the NSP operator with another 
predefined DP address in the address space of the access provider. A circuit ID is a 
unique identifier agreed upon by the access provider and the NSP to identify a circuit 
which traverses both networks. Another alternative embodiment of a troubleshooting 
portal would employ a proxy or a NAT system whereby the IP address provided by the 
NSP operator would be associated with an JP address selected from a pool of temporary 
IP addresses in the access provider's IP address domain associated with the desired 
communication devices, thereby providing for the use of repeatable IP addresses that may 
be globally unique locally scoped (GULS). In this embodiment, the troubleshooting 
portal performs IP proxying or NAT to enable the NSP to use their own IP addresses to 
access the communication devices even though the communication devices have really 
been assigned IP addresses in the access providers address space. 

The present invention may be viewed as providing a method for enabling 
connectivity between first and second communication devices, as follows: accessing a 
troubleshooting portal by estabUshing a session, specifying a predefined endpoint 
corresponding to the communication device for which access is desired, associating the 
specified endpoint with the communication device and finally establishing a connection 
between the NSP operator and the requested communications device. The method may 
also include verifying security access wherein a right to access the requested 
communication device is verified and where the connection is established only after the 
right to access is verified. The method may also include specifying an IP address and 
associating the IP address with the communication device. 

Other systems, methods, features, and advantages of the troubleshooting portal 
will be or become apparent to one with skill in the art upon examination of the following 
drawings and detailed description. It is intended that all such additional systems, 



10 



TKHR Docket No. 061607-1390 



methods, features, and advantages be included within this description, be within the 
scope of the troubleshooting portal, and be protected by the accompanying claims. 

BRIEF DESCRIPTION OF THE DRAWINGS 

5 The troubleshooting portal can be better understood with reference to the 

following drawings. The components in the drawings are not necessarily to scale, 
emphasis instead being placed upon clearly illustrating the principles of the 
troubleshooting invention. Moreover, in the drawings, like reference numerals designate 
corresponding parts throughout the several views. 

10 FIG. 1 is a prior art block diagram illustrating a simpUfied communication 

environment with an access provider network, a network service provider (NSP) network, 
two communication devices and two user devices. 

FIG. 2 is a block diagram of portions of the simphfied communication 
environment shown in FIG. 1 detailing a possible location of a preferred embodiment of 

15 the troubleshooting portal and the associated virtual circuits to the communication 
devices. 

FIG. 3 is a block diagram of a network model illustrating a framework within 
which the preferred embodiment of the troubleshooting portal resides. 

FIG. 4 is a block diagram illustrating the preferred embodiment of the 
20 troubleshooting portal of FIG. 2 and a plurality of virtual circuits providing access to a 
plurality of communication devices. 

FIG. 5 is a block diagram illustrating a plurality of NSP networks connecting 
through an alternative embodiment of a troubleshooting portal. 

FIG. 6 is a flow diagram illustrating the operation of the preferred embodiment of 
25 the troubleshooting portal of FIG. 2. 

FIG. 7 is a block diagram of the components of a preferred embodiment of the 
troubleshooting portal of FIG. 2. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 

30 The troubleshooting portal logic of the troubleshooting portal in accordance with 

the present invention can be implemented in software, hardware, or a combination 
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thereof. In a preferred embodiment, the troubleshooting portal logic is implemented in 
software that is stored in a memory and that is executed by a suitable microprocessor (uP) 
situated in a server or servers that are located in the access providers network operations 
center. However, the troubleshooting portal program, which comprises an ordered Usting 
5 of executable instructions for implementing logical fiinctions, can be embodied in any 
computer-readable medium for use by or in connection with an instruction execution 
system, apparatus, or device, such as a computer-based system, processor-containing 
system, or other system that can fetch the instructions from the instruction execution 
system, apparatus, or device and execute the instructions. 
10 In the context of this document, a "computer-readable medium" can be any means 

that can contain, store, communicate, propagate, or transport the program for use by or in 
connection with the instruction execution system, apparatus, or device. The computer 
readable medium can be, for example but not limited to, an electronic, magnetic, optical, 
electromagnetic, infrared, or semiconductor system, apparatus, device, or propagation 
15 medium. More specific examples (a nonexhaustive Ust) of the computer-readable 
medium would include the following: an electrical connection (electronic) having one or 
more wires, a portable computer diskette (magnetic), a random access memory (RAM) 
(electronic), a read-only memory (ROM) (electronic), an erasable programmable read- 
only memory (EPROM or Flash memory) (electronic), an optical fiber (optical), and a 
20 portable compact disc read-only memory (CDROM) (optical). Note that the computer- 
readable medium could even be paper or another suitable medium upon which the 
program is printed, as the program can be electronically captured, via for instance optical 
scanning of the paper or other medium, then compiled, interpreted or otherwise processed 
in a suitable mamier, if necessary, and then stored in a computer memory. 
25 In a preferred embodiment, although not limited to this particular limitation, the 

troubleshooting portal may be implemented as software executed by a computer. 
Alternative troubleshooting portal embodiments may be implemented by hardware or by 
a combination of hardware and software executed by a processor. When the 
troubleshooting portal is implemented in part or entirely by software, the processor 
30 executing the troubleshooting portal software may be employed as part of another system 
and shared by the troubleshooting portal, or, the processor may be a dedicated element of 
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a troubleshooting portal. Any such aUemative embodiments of a troubleshooting portal 
are intended to be within the scope of this disclosure and be protected by the 
accompanying claims for the troubleshooting portal. 

Furthermore, the preferred embodiment of the troubleshooting portal is illustrated 
and described in the context of a communications network having an ATM based portion 
and a frame relay based portion; however, the concepts and principles of the 
troubleshooting portal logic are equally appUcable to other communication techniques, 
such as, but not limited to, X.25, hitemet protocol (IP) routed, multiprotocol label 
switching (MPLS) or the like. Similarly, alternative embodiments of a troubleshooting 
portal may not reside inside of or as part of a server, but rather may be a separate device 
located adjacent to the server or may be located in another convenient location and 
simply communicate with the server as needed to implement the functionality of the 
troubleshooting portal. Any such alternative embodiments of the troubleshooting portal 
are intended to be within the scope of this disclosure and be protected by the 
accompanying claims for the troubleshooting portal. 

FIG. 2 shows an illustrative example of a communication environment 22 in 
which a troubleshooting portal 100 may reside. Elements in FIG. 2 that are similar to 
those in FIG. 1 bear the same reference numerals. Such elements having the same reference 
numerals in FIGs. 1 and 2 may be considered to be like elements, however, since these Uke 
numeraled elements are incidental to the operation of the troubleshooting portal 100 which 
utiHzes existing portions of communication network 22, one skilled in the art will realize 
that elements in FIGs. 1 and 2 need not be identical, as any variations of such elements will 
not adversely affect the functioning and performance of the troubleshooting portal 100. 

A preferred embodiment of troubleshooting portal 100 is implemented on a 
processor based device such as, but not Umited to, a server or a PC. If implemented as a 
processor, such a processor is typically a commercially available processor. Examples of 
commercially available processors include, but are not limited to, a Pentium 
microprocessor from hitel Corporation, Power PC microprocessor, SPARC processor, 
PA-RISC processor or 68000 series microprocessor. Many other suitable processors are 
also available. The froubleshooting portal 100 is connected to and in communication with 
access unit 168. Alternative embodiments of a froubleshooting portal 100 may be 
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connected to any commonly employed communication device which provides 
connectivity to access provider network 24, and which operates on a link layer or above, 
as described hereinafter (see also FIG. 3). Additionally, alternative embodiment to the 
troubleshooting portal 100 may be implemented on other types of well-known layered 
communication environments such as, but not limited to, ATM digital subscriber loop 
(DSL), IP, or the like. 

The troubleshooting portal 100 can be accessed and operated by a general purpose 
computer or other type of interface device whereby an operator can monitor and control 
the operation of troubleshooting portal 100. In the simphfied illustrative example shown 
in FIG. 2, computer terminal 64 is shown to be connected to troubleshooting portal 100, 
which may be implemented in a server (not shown), via link 70. An operations center 
operator can then access and operate router 168 by providing instructions to the 
troubleshooting portal 100. hi alternative embodiments of the troubleshooting portal 100, 
the access to troubleshooting portal 100 could be provided by indirectly linking computer 
terminal 64 and troubleshooting portal 100 through an intermediary device such as a 
server, by implementing troubleshooting portal 100 in computer terminal 64, linking 
computer terminal 64 and troubleshooting portal 100 through a communications network 
such as a LAN or Ethernet or the like, or any other commonly employed techniques for 
providing interconnectivity between communication devices. Any such alternative 
embodiments of the troubleshooting portal 100 are intended to be within the scope of this 
disclosure and the claims of troubleshooting portal 100. 

The troubleshooting portal 100 provides the NSP operator an effective, efficient 
and inexpensive way to quickly access a pluraHty of communication devices, such as 
communication devices 34 and/or 32, which are connected to access provider network. 
Furthermore, as explained in detail hereinafter, NSP operators working from OC 78 need 
not contact access provider operators working in OC 62 for authorization to access the 
communication devices 32 and/or 34, nor does the access provider operator in OC 62 
have to spend time (or money) in establishing VCs from the interface point with NSP 
network 26, through access provider network 24, to communication devices 32 an/or 34. 

FIG. 3 shows a block diagram of a network model 170 illustrating the layered 
framework within which the preferred embodiment of the troubleshooting portal 100 
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(FIG. 2) resides. However, alternative embodiments of the troubleshooting portal 100 
may reside and operate in communication systems employing other standards and 
protocols. Examples of such communication systems include, but are not limited to, 
ATM, X.25, IP routed, MPLS or the like. Any such alternative embodiments of a 
5 troubleshooting portal 100 are intended to be within the scope of this disclosure and be 
protected by the accompanying claims for the troubleshooting portal 100. 

As previously described, communication devices 32 and 34 (see also FIG. 2) may 
be the type of device that connects user equipment to a frame relay or ATM network, 
such as access provider network 24 (FIG. 2). Communication devices 32 and 34 
10 typically commimicate over a frame relay network using Layer 2, or the data link layer 
172, of the OSI seven layer model 174. Communication devices 32 and 34, however, are 
each also aware of layer 1, or the physical layer 176, of the OSI seven layer model, since 
it is a physical layer access device, such as a DSU. 

Implemented at the data link layer 172 are the standards and protocols (including 
15 the logical management interface (LMI)) that enable the transport of frame relay data. 
The protocol architecture that supports frame relay transport can be considered to reside 
in two planes of operation. The control plane 178 and the user plane 180. The control 
plane 178 allows signaling to control the establishment and termination of transportation 
services on the user plane 180. At the data link layer 172, LAPD (link access protocol, D 
20 channel); (Q.922); (ISDN Data Link Layer Specification For Frame Mode Bearer 
Services) 1 82 is used to provide a reliable data link control service with error control and 
flow control. This data link control service is used for the exchange of Q.933 control 
signaling messages 184. For the transfer of information between end users, the user 
plane 180 protocol is LAPF (link access procedure for frame mode bearer services) 
25 CORE (Q.922 CORE); (Annex A-Core Aspects Of Recommendation Q.922 For Use 
With Frame Relay Bearer Service) 186. The protocol Q.922, among other things, 
includes an address header that is apphed to a data packet and provides the addressing for 
the frame relay packet. Packets are transmitted over links 188 and 190. Network model 
170 also provides for user selectable ftmctions 192. 
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The physical layer represents and includes the hardware connections and physical 
media that enable the transport of information over the network. An example of such 
hardware and media is shown in FIGs. 1 and 2. 

Other communication systems such as ATM, X.25, IP routed, MPLS or the like 

5 may employ an equivalent link layer system to the above-described link layer system for 
a frame relay based communication network. One advantage provided by the 
troubleshooting portal 100 is the capability of interfacing a variety of communication 
systems which may employ different link layer systems and/or data protocols in a manner 
which provides easy access by a NSP operator to various communication devices. 

10 Returning now to the simplified illustrative example shown in FIG. 2, 

troubleshooting portal 100 is shown to communicate with router 168. An NSP operator 
first establishes a session with troubleshooting portal 100 from computer terminal 80. 
Estabhshing a session with the troubleshooting portal 100 can be effected by any means 
commonly employed in the art to estabUsh sessions between a user and a server or other 

15 network management system. Computer terminal 80, in the simphfied illusfrative 
example of FIG. 2, is connected to router 168 over a predefined VC 152. VC 152 is 
defined by a series of DLCIs which provide the connectivity between access unit 82 and 
router 168, via switch 76. As illustrated in this simplified example, access unit 82 is 
physically connected to switch 76 via Imk 86, and switch 76 is connected to router 168 

20 via link 154. 

Once the NSP operator has established a session with troubleshooting portal 100, 
the NSP operator may access communication device 32 by specifying the IP address or a 
hke identifier associated with communication device 32, also known as an end point. 
Typically, the assigned IP address, if used as the identifier, is a public IP address which is 
25 officially part of the access provider's address domain. In one embodiment, 
troubleshooting portal 100 instructs access unit 168 to effectively couple VC 152 with 
VC 156.0nce VC 152 has been coupled with VC 156, the NSP operator has connectivity 
to communication device 32 and may send troubleshooting data and tests to 
commimication device 32 using the specified BP address. 
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An alternative embodiment of troubleshooting portal 100 would instruct router 
168 to route management traffic between the NSP operator and communication device 32 
overVCsl52andl56. 

In another alternative embodiment of troubleshooting portal 100, router 168 

5 would be pre-configured to route NSP management traffic to the troubleshooting portal 
100. The troubleshooting portal performs network address translation (NAT) on the 
NSPs management traffic and routes it back to router 168 for further routing to the 
communications devices. 

In this simplified illustrative example, VC 156 establishes connectivity between 

10 router 168 and communication device 32 via switches 50, 46 and 48. VC 156 can be 
defined by a series of DLCIs associated with links 160, 162, 58 and 40, VC 156 has been 
predefined by the access provider and is identified in an address table (not shown) 
residing in memory of trouble shooting portal 100. The address table may also contain a 
plurality of VCs which may be used to establish connectivity to a plurality of other 

1 5 conmiunication devices. Alternative embodiments of a troubleshooting portal 1 00 may 
employ a routing table, network configuration database, Lightweight Directory Access 
Protocol (LDAP) directory or the like to provide the necessary path and router 
information to define a VC. Alternative embodiments of a troubleshooting portal 100 
may utilize alternative means of identifying these VCs commonly employed in the 

20 communication arts. Other alternative embodiments of a troubleshooting portal 100 may 
access information identifying a VC from an address table or the hke which is residing in 
a location removed firom troubleshooting portal 100, For example, the address table or 
the like may reside in computer terminal 80. Any such alternative embodiments of the 
troubleshooting portal 100 are intended to be within the scope of this disclosure and the 

25 claims of troubleshooting portal 100. 

Another alternative embodiment of troubleshooting portal 100 would instruct 
router 168 to route management traffic to a DSLAM or similarly fiinctioning switch. In 
the simplified illustrative example shown in FIG. 2, the NSP operator may access 
communication device 34 through DSLAM 52. The NSP operator would establish a 

30 session with troubleshooting portal 100 and specify the identifier associated with 
communication device 34. Troubleshooting portal 100 would instruct router 168 to route 
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management traffic, via VCs 152 and 158, to DSLAM 52. DSLAM 52 would effect the 
necessary switching operations such that the management traffic could be dehvered over 
physical link 42 to communication device 34. Typically, DSLAM 52 or a similar 
functioning switch would be connected to a plurality of communication devices 34-34i. 
5 Thus, connectivity to a plurahty of communication devices 34-34i can be provided by the 
troubleshooting portal 100 which would provide the necessary information to DSLAM 52 
such that the appropriate switching can occur to provide access to the specified 
communication device. 

In the simphfied illustrative example shown in FIG. 2, device 52 may be a 
10 DSLAM which provides connectivity between the access provider network 24 and a 
plurahty of endpoints, such as user devices 30 through 30i. The DSLAM provides the 
routing and switching function for the plurality of endpoints. A single VC 158 identifies 
the virtual path fi-om DSLAM 52 back to the router 168 in operation center 62. 
Associated with the DSLAM and/or the portal is the address table which provides a 
15 hierarchy based method of associating the endpoint IP address with the circuit ID 
specified by the NSP operator. Such a table would have a circuit ID for the endpoint 
which may be associated with an IP address specified in at least three different manners. 
First, an IP address for the endpoint could be specified by the access provider by 
assigning a permanent IP address from the access provider's domain of IP address names. 
20 Ahematively, in the event that the access provider has not assigned a permanent IP 
address to the endpoint, the NSP may assign a permanent IP address from the NSP's 
domain of IP addresses. Or, if neither the access provider or the NSP has assigned a 
permanent IP address to the endpoint, an IP address may be selected from a pool of 
available access provider IP addresses and temporarily assigned to the endpoint for the 
25 duration of the session. Such an assignment of an IP address from an IP address pool 
could be implemented in any manner conraionly employed in the communication arts. 
After the IP address for the desired endpoint has been identified in the address table or 
assigned from the IP address pool, the DSLAM would operate to provide the appropriate 
coimectivity to the desired endpoint. 
30 For example, the NSP operator may desire to establish a connection back to user 

device 30. The NSP operator would establish a session with troubleshooting portal 100 
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in the maimer described hereinabove. The troubleshooting portal 100 and DSLAM 52 
would then associate the IP address and VCs to enable connectivity between the NSP 
operator and user device 30. The NSP operator would establish connectivity to user 
device 30i by specifying a circuit identifier associated with user device 30i, and the 
troubleshooting portal 100 and DSLAM 52 would then appropriately configure the 
system to provide a VC 158 and 158i (VC 158i being associated with link 42i which is 
connected to communication device 34i). 

When the NSP operator has completed the troubleshooting of the selected 
communication device, the NSP operator terminates the session with troubleshooting 
portal 100 by so notifying the troubleshooting portal 100. Ending the session with the 
troubleshooting portal 100 can be effected by any means conomonly employed in the art 
to terminate sessions between a user and a device. If a temporary IP address from the 
pool of IP addresses has been assigned by the portal, upon termination of the session, the 
assigned IP address is released. The released IP address can be used in later established 
sessions or in other applications. 

The VCs 156 and 158 have been predefined by access provider network 24 
operators. VCs 156 and 158 may be either SVCs or PVCs as determined by the operators 
of access provider network 24. The address table residing in troubleshooting portal 100 
may also contain a plurality of VCs to provide connectivity to a pluraUty of other 
communication devices (not shown) connected to access provider network 24 which NSP 
operators may desire access to. Once the address table has been estabhshed in 
troubleshooting portal 100, NSP operators may access any communication device for 
which a predefined VC has been estabhshed by simply estabhshing a session with 
troubleshooting portal 100 and instructing the troubleshooting portal 100 to provide 
connectivity (by routing management traffic or by coupling VCs) to the identified 
communication device or to the DSLAM 52 (or similarly fimctioning switch) connected 
to the selected communication device. Access provider operators (not shown), once 
having estabhshed a troubleshooting portal 100, do not need to be contacted by the NSP 
operator each time the NSP operator wants to access a particular communication device 
for which a predefined VC has been established and identified in the troubleshooting 
portal 100 address table. 
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In the preferred embodiment of a troubleshooting portal 100, the troubleshooting 
portal 100 is capable of simultaneously supporting a plurality of different users accessing 
different end points. The number of users who may be simultaneously provided access 
through a troubleshooting portal 100 and the method of managing access of the users 
5 would be determined at the time of the design and implementation of the troubleshooting 
portal 100. 

An alternative embodmient of troubleshooting portal 100 may also contain 
network security features. Such a user security feature would require the NSP operator to 
provide credentials or another form of identification during a log-in process, described 
10 hereinafter (see step 306 of FIG. 6), before the troubleshooting portal 100 would allow 
access to the NSP operator. Thus, troubleshooting portal 100 is seen to prevent 
undesirable imauthorized access to communication devices cormected to the access 
provider network 24. The above-described user security feature may utilize any well 
known protocol commonly employed in the art which provides the desired security 
15 functionality for troubleshooting portal 100. The network security features may be 
implemented within the troubleshooting portal 100 itself or be implemented by a 
processor at an alternative location, such as, but not limited to, a server or router typically 
found in firewalls, on the router 168 (FIG. 2), at the end point communication device, at 
the computer terminal 80 or at any other convenient location without impacting the 
20 operation or fimctionahty of a troubleshooting portal 1 00. 

Access provider operators may also utilize troubleshooting portal 100 to access 
communication devices connected to access provider network 24. As illustrated in FIG. 
2, an access provider operator working jfrom OC 62 may access communication device 34 
from computer terminal 64 by estabhshing connectivity to router 168. The access 
25 provider operator would establish a session with troubleshooting portal 100 and then 
request troubleshooting portal 100 to instruct access unit 168 to provide connectivity to 
VC 156, thereby providing access to communication device 32, or would instruct 
troubleshooting portal 100 to provide connectivity to VC 164 to estabUsh access to 
communication device 34. Similarly, the access provider operator could instruct 
30 troubleshooting portal 100 to provide access to any communication device connected to 
access provider network 24 which has a predefined VC established in the troubleshooting 
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portal 100 address table. Additionally, the above-described security features could be 
used to limit access by the access provider operators. 

FIG. 4 is a simpHfied illustration demonstrating the manner in which 
troubleshooting portal 100 may provide connectivity to a plurality of communication 
5 devices. An NSP operator working in NSP network 200 may desire to establish 
connectivity to a plurality of communication devices as shown by communication 
devices 202, 204 and i. The NSP operator would establish connectivity to 
communication device 202 by first establishing a session with troubleshooting portal 100 
over VC 208 and then requesting troubleshooting portal 100 to provide connectivity to 
10 communication device 202. One embodiment of troubleshooting portal 100 would then 
instruct access unit 214 couple VC 208 and VC 218. An alternative embodiment of 
troubleshooting portal 100 would route management traffic over VC 208 and VC 218. 

Ahematively, the NSP operator could establish connectivity with communication 
device 204 by requesting troubleshooting portal 100 to couple VC 208 with VC 220 or by 
15 requesting troubleshooting portal 100 to route management traffic over VC 208 and VC 
220. Similarly, the NSP operator could establish connectivity with communications 
device i by requesting troubleshooting portal 100 to couple VC 208 with VC ii or by 
requesting troubleshooting portal 100 to route management traffic over VC 208 and VC 
ii. One skilled in the art will appreciate that the NSP operator can establish connectivity 
20 to any communication device which has a predefined VC 222 hsted in the address table 
of the troubleshooting portal 100. One skilled in the art will appreciate that the physical 
path to which VC 208 has been assigned may have a plurality of switches (not shown) 
connected together by a plurahty of links (not shown). Likewise, VCs 218, 220 and i, 
may be assigned to a plurahty of relay switches and links (not shown). Because a VC 
25 defines a path over a physical system having a plurality of switches and a plurality of 
associated links, a VC will allow the troubleshooting portal 100 to estabhsh connectivity 
between devices by coupling predefined VCs together. 

The functionality of access unit 214 could be implemented by a DSLAM, or 
similar fimctioning switch which could perform the necessary routing and switching 
30 fimctions to provide connectivity to the requested communication devices 202, 204 or i. 
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In this application, the DSLAM would be connected to the access switch 214 via a single 
permanent VC. 

FIG. 4 also shows that an access provider operator working in access provider 
network 216 may establish connectivity to any communication device having a 
predefined VC residing in the address table of an alternative embodiment of 
troubleshooting portal 100. For example, the access provider operator could access 
communication device 202 from computer terminal 64 by estabUshing a session with 
troubleshooting portal 100, and by requesting troubleshooting portal 100 to have access 
unit 214 provide connectivity to communications device 202 using VC 218. 

FIG. 5 is a simplified illustrative example of an alternative embodiment of the 
tiroubleshooting portal 100 which provides access to a plurahty of NSP networks. 
Troubleshooting portal 252 is shown as connected to and in communication with access 
unit 262. For example, an NSP operator working fi-om NSP network A 260 may access 
communication device 254 from computer terminal 256 by establishing a session with 
troubleshooting portal 100. Connectivity between NSP network A 260 and access 
provider network 264 is shown by VC 266, which corresponds to the physical link 268. 
Once the NSP operator has established a session with troubleshooting portal 100, the 
operator specifies an identifier to the troubleshooting portal 100 which is associated with 
communication device 254. Then, one embodiment of troubleshooting portal 100 would 
instruct access unit 262 to couple VC 266 with the predefined VC 270 as specified in the 
address table residing in troubleshooting portal 100. An alternative embodiment of 
troubleshooting portal 100 would instruct access unit 262 to route management ti-affic 
over VC 266 and VC 270. 

Similarly, an NSP operator working from computer terminal 272 residing in NSP 
network B 274, may establish connectivity with communication device 276 by 
establishing a session with ti-oubleshooting portal 100 and then specifying an identifier 
associated with communication device 276. One embodiment of tioubleshooting portal 
100 have access unit 262 couple VC 278 with VC 280. An alternative embodiment of 
troubleshooting portal 100 would instiiict access unit 262 to route management traffic 
overVC 278 andVC 280. 
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Likewise, an NSP operator working from computer terminal 282 residing in NSP 
network i 284, may establish connectivity with any communication device coimected to 
access provider network 264 by establishing a session with troubleshooting portal 100 
and by specifying an identifier associated with the desired communication device. 
5 Troubleshooting portal 100 would establish connectivity between the NSP operator and 
the desired communication device by either coupling VC 288 with the VC associated 
with the desired communication device, or would instruct access unit 262 to route 
management traffic over VC 288 and the VC associated with the desired communication 
device. 

1 0 Li these simpUfied illustrative examples, one skilled in the art will appreciate that 

VC 266 corresponds to physical link 268 which may have a plurality of switches and 
communication links (not shown). Likewise, VCs 270, 278, 280 and 288 correspond 
respectively to physical links 294, 290, 296 and 292. Physical links 294, 290, 296 and/or 
292 may have a plurality of switches and communication Hnks (not shown). This 

15 alternative embodiment of the troubleshooting portal 100 is seen to have the advantage of 
providing controlled access to a plurahty of NSPs, where the plurality of NSPs are 
contracted with a plurality of customers to provide network services to a plurality of 
communication devices. That is, access provider network 264 may establish a 
troubleshooting portal 100 with an address table having connectivity information, such 

20 as, but not limited to, VCs, IP addresses, slot/port DSLAM or switch information. NSP 
operators will not have to continually bother and distract the access provider operators 
(not shown) each time one of the NSP operators needs to establish connectivity to a 
communication device connected to access provider network 264. Furthermore, such an 
alternative embodiment of a troubleshooting portal 100 having a security feature could 

25 hmit the access of the various NSP operators to only those communication devices to 
which the NSP operators are authorized to access (e.g. only those communication devices 
for which an NSP operator has contracted to provide service to). 

FIG. 6 is a flow chart 300 illustrating the operation of logic for implementing one 
possible implementation of troubleshooting portal 100 of FIGs. 2, 4 and 5. The flow 

30 chart of FIG. 6 shows the architecture, functionality, and operation of a possible 
implementation of the software for implementing the logic for a troubleshooting portal 
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100. In this regard, each step may represent a module, segment, or portion of code, 
which comprises one or more executable instructions for implementing the specified 
logical fiinction(s). It should also be noted that in some alternative implementations, the 
functions noted in the steps may occur out of the order noted in FIG. 6 or may include 

5 additional functions without departing significantly from the functionahty of the 
troubleshooting portal 100. For example, two steps shown in succession in FIG. 6 may in 
fact be executed substantially concurrently, the steps may sometimes be executed in the 
reverse order, or some of the steps may not be executed in all instances, depending upon 
the functionality involved, as will be further clarified hereinbelow. 

10 The process of using a troubleshooting portal 100 (FIGs. 2, 4 and 5) begins at step 

302. In the preferred embodiment of troubleshooting portal 100, the NSP operator, 
hereinafter referred to as the user, logs into the portal to initiate a session with 
troubleshooting portal 100. In alternative embodiments, as previously described, the user 
may be an access provider operator or another individual requiring access to a 

15 communications device. 

Step 306, in embodiments of a troubleshooting portal having a security feature as 
previously described, determines whether or not the user is authorized to log into the 
portal and initiate a session. If not, the NO condition, the process ends at step 322. If the 
user is authorized, the YES condition, the process continues to step 308. One possible 

20 implementation of troubleshooting portal 100 may include a feature where the portal 
transmits to the user a listing of circuit IDs or the Hke corresponding to end points 
available for access through the troubleshooting portal 100. As previously discussed, 
alternative embodiments of the troubleshooting portal 100 may provide other forms of 
identifying information by which the user may specify the desired communication device 

25 or may provide further opportunity for the user to provide the necessary certification 
under the NO condition of step 306. 

At step 310, the user responds by specifying the troubleshooting portal 100 an end 
point or an equivalent identifier corresponding to the communication device for which 
access is desired. At step 312, the troubleshooting portal provides mapping of the 

30 endpoint to the switch port to which the endpoint is connected. As previously described, 
alternative embodiments of a troubleshooting portal 100 having security features may 
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verify that the user is authorized to have access to the requested end point or 
communication device (steps not shov^n). If the user does not have authorized access, 
then the session may terminate or further provide an opportunity for the user to provide 
the necessary certification. 
5 At step 314, an IP address and the associated route is assigned to the selected end 

point. The IP address, in the preferred embodiment, could be a permanent IP address 
assigned from the IP addresses in either the access provider's domain or the NSP's 
domain, or assigned a temporary IP address from an EP address pool from the access 
providers assigned IP address domain. At step 316, the troubleshooting portal and switch 

10 have established the requested connectivity to the selected end point (the associated 
communication device). The session continues at 316 whoro the user commimicates with 
the selected communication device. 

At step 318, the user indicates to the troubleshooting portal that the 
communication session has come to an end. At step 320, the troubleshooting portal 

15 terminates a session. If a temporary IP address has been assigned by troubleshooting 
portal 100, troubleshooting portal 100 orders the release of the temporary IP address. If 
the troubleshooting portal 100 embodiment employs the apparatus and method of 
coupling VCs together, or if a DSLAM or switch having similar functionalities is 
employed, troubleshooting portal 100 would instruct such devices to release the IP 

20 address and/or the communication device. The process then ends at step 322 and the IP 
address is released. 

In alternative embodiments of the troubleshooting portal 100 (FIGs. 2, 4 and 5), 
an additional step (not shown) may be executed after step 316 which provides for the 
monitoring of communication activities between the user and the selected device. If there 
25 is no activity for a predetermined time period, the portal may initiate an automatic 
termination of the session. This alternative embodiment provides an automatic method 
for terminating a session should the user forget to sign-off and log-out of the portal 
session. 

FIG. 7 is a block diagram illustrating a preferred embodiment of troubleshooting 
30 portal 100. The embodiment of troubleshooting portal 100 illustrated in FIG. 7 contains 
interface circuitry 342, a processor 346, a device configuration module 352, timing 
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circuitry 358 and a memory 350. The memory 350 has at least an address table 354, a 
signed IP address location 356 and security functions 348. Timing circuitry 358 includes 
clock 360. 

hiterface circuitry 342 interfaces with a communication system, such as but not 

5 limited to, a local area network (LAN) or Ethernet network or wide area network (WAN). 
Sessions with troubleshooting portal 100 can be established over this communication 
system 304 by an NSP operator (not shown) and/or an access provider operator (not 
shown). Also, communication system 304 provides connectivity to the access unit (not 
shown) which estabhshes connectivity to the requested endpoints as previously described 

10 (see FIGs. 2, 4 and 6). One skilled in the art will reahze that communication system 304, 
as illustrated in FIG. 7, is only one of a variety of ways in which troubleshooting portal 
100, operators, and components of the communication network may be in communication 
with each other. Any variety of communication schemes could be employed without 
effecting the functionality of troubleshooting portal 100. For example, the 

15 troubleshooting portal 100 may host routing functionality normally provided by other 
communications devices within communication system 304. The utilization of such 
alternative commimication schemes with a troubleshooting portal 100 is intended to be 
within the scope of this disclosure and the claims for a troubleshooting portal 100. 

Processor 346 performs the various processing functions associated with the 

20 troubleshooting portal 100. For example, when a user initiates a session with 
troubleshooting portal 100 having the above-mentioned security functions, the user 
submits the required certification protocols and the security function logic is executed by 
processor 346 to validate the user's authority to access the portal and to access the 
requested end points. Security functions and protocol logic reside in the security 

25 functions 348 portion of memory 350. In an alternative embodiment, the processor 346 
may be employed as part of another system and shared by the troubleshooting portal 100, 
or, the processor may be a dedicated element of troubleshooting portal 100. Additionally, 
the processor may reside in a convenient alternative location, such as, but not limited to, a 
stand alone facility without adversely affecting the functionality of the troubleshooting 

30 portal 100. Any such alternative embodiments of a troubleshooting portal 100 are 



26 



TKHR Docket No. 061607-1390 



intended to be within the scope of this disclosure and be protected by the accompanying 
claims for the troubleshooting portal 100. 

Device configuration module 352 provides the necessary VC information to the 
access unit (not shown) based upon the address information residing in address table 354 
of memory 350. Also, in the preferred embodiment of troubleshooting portal 100, the 
user specifies an IP address or equivalent identifier which is to be associated with the 
desired end point. The IP address is stored in the assigned IP address 356 portion of 
memory 350. Then, as device configuration module 350 maps the VCs and/or sets up the 
routes as required to estabhsh connectivity between the user and the desired end point. 
Device configuration module 352 maps the assigned IP address with VCs and/or routes 
from the address table 354. 

Ahemative embodiments of the troubleshooting portal 100 may have timing 
circuit 358. Timing circuit 358 interfaces with processor 346 to monitor the activity of 
communications between the user and the endpoint. As long as communication activity 
is occurring between the user and the endpoint, the timing circuit 358 is inactive. 
However, when activity ceases between the user and the endpoint, a clock 360 associated 
with timing circuit 358 begins to clock such that timing circuit 358 can determine the 
period of inactivity between the user and the endpoint. If the detected inactivity 
continues for a pre-defined period of time, the timing circuit 358 instructs the processor 
346 to terminate the session with the user. 

Many variations and modifications may be made to components of the above- 
described embodiment of the troubleshooting portal 100 without departing substantially 
from the spirit and principles of the troubleshooting portal 100. For example, the above- 
described security features may be omitted. Any such alternative embodiments of a 
troubleshooting portal 100 are intended to be within the scope of this disclosure and be 
protected by the accompanying claims for the troubleshooting portal 100. 

Alternative embodiments of the troubleshooting portal 100 (FIGs. 2, 4 and 5), 
may provide for a firewall configuration. Such a firewall configuration would perform 
the functions of filtering and providing security, as is well known in the art. 

The preferred embodiment of troubleshooting portal 100 may employ a variety of 
methods to associate an IP address with an endpoint specified by the NSP operator or 
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Other party desiring to establish connectivity to the endpoint using the troubleshooting 
portal 100, One illustrative example described hereinabove was the use of an address 
table wherein a hierarchy is established such that the troubleshooting portal first checks 
to see if the endpoint has been associated with a permanent IP address assigned from the 
access provider's BP address domain. If not, then an IP address would be selected from 
an available pool of IP addresses from the access provider's IP address domain for the 
duration of the session. Embodiments of troubleshooting portal 100 working with a 
DSLAM, or similarly functioning switch, would identify the necessary VCs and/or routes 
to effect the necessary switching configuration through the DSLAM or switches such that 
the NSP operator or other user would have connectivity to the desired endpoint. 

The preferred embodiment of troubleshooting portal 100 provides connectivity 
between the NSP operator or user and the specified end point, as identified by an IPS or 
equivalent identifier. Often, the IP address or an IP address associated with the 
equivalent identifier has been assigned to the end point by the NSP. Thus, there is no 
need to have a temporary IP address assigned or the need to employ an address 
translation method. 

An alternative embodiment of a troubleshooting portal may be implemented 
utilizing network address translation (NAT) by the troubleshooting portal 100 (FIG. 2). 
With NAT, the NSP operators assigned IP address is translated (matched to) to the access 
provider's previously assigned IP address for the specified end point. Here, the 
troubleshooting portal 100 provides mapping of a circuit identifier and a selected end 
point into an IP address within the access provider network 24 (FIG. 2). The selection 
could be implemented via a circuit ID or an equivalent identifier, such as but not limited 
to, a system location and/or other means commonly employed in the art. The 
troubleshooting portal 100 would allow the NSP operator to select the device to address 
using a web page, telnet session or the like. The troubleshooting portal 100 would then 
provide a mapping and translation of the address used by the NSP operator to the device 
using the address within the network of the access provider. These access provider 
addresses could be private addresses which most access providers use within their 
networks. 
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Another alternative embodiment of a troubleshooting portal 100 (FIG. 2) may be 
implemented using IP proxy. This alternative would be particularly advantageous in 
environments where limited IP addresses are available. Here a single IP address is 
assigned to the switch 150. The switch 150 acts as a proxy agent for all end points 
5 connected to the switch 150. Although end points still have IP addresses, the switch 150 
now allows the assignment of non-unique DP addresses to the end points. This proxy 
agent embodiment of a troubleshooting portal which utilizes repeatable IP addresses is 
known in the art as a globally unique locally scoped (GULS) addressable end point 
system. 

10 It should be emphasized that the above-described embodiments of the 

troubleshooting portal, particularly, any "preferred" embodiments, are merely possible 
examples of implementations, merely set forth for a clear understanding of the principles 
of the troubleshooting portal. Many variations and modifications may be made to the 
above-described embodiment(s) of the troubleshooting portal without departing 

15 substantially from the spirit and principles of the troubleshooting portal. All such 
modifications and variations are intended to be included herein within the scope of this 
disclosure for the troubleshooting portal and be protected by the following claims. 
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CLAIMS 

At least the following is claimed: 



1 1. A method for providing connectivity between a first communication 

2 device and a second communication device, said second communication device residing 

3 in an access provider communication system, the method comprising the steps of: 

4 providing access to a troubleshooting portal from a location associated with said 

5 first communication device; 

6 specifying to said troubleshooting portal a predefined identifier associated with 

7 said second communication device; 

8 associating said predefined identifier with said second communication device; and 

9 estabhshing connectivity between said first communication device and said 
10 second communication device based upon said specified predefined identifier. 

1 2. The method of claim 1, wherein said second communication device is an 

2 endpoint. 

1 3. The method of claim 1, wherein said step of establishing connectivity 

2 fiirther includes the step of actuating at least one switch such that a plurality of physical 

3 links associated with a plurality of data link connection identifiers (DCLIs) are coupled 

4 together, 

1 4. The method of claim 3, wherein said step of actuating at least one switch 

2 further includes the step of actuating a digital subscriber loop access multiplexer 

3 (DSLAM) connected to a plurality of second communication devices such that said 

4 second communication device associated with said specified identifier is connected by 

5 said step of establishing connectivity. 

1 5. The method of claim 1, wherein said step of establishing connectivity 

2 further includes the step of routing data over a plurality of physical links associated with 

3 said predefined identifier. 
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1 6. The method of claim 5, further including the step of actuating a digital 

2 subscriber loop access multiplexer (DSLAM) connected to a plurality of second 

3 communication devices such that said second communication device associated with said 

4 specified identifier is connected by said step of estabUshing connectivity. 

1 7. The method of claim 1, wherein said location is a site in a network service 

2 provider communication system. 

1 8. The method of claim 1, wherein said location is a site in said access 

2 provider communication system. 

1 9. The method of claim 1, wherein said step of associating further includes 

2 the step of associating a predefined circuit identifier (ED) with said first communication 

3 device. 

1 10. The method of claim 1, further including the step of assigning a first 

2 internet protocol (EP) address, wherein said first IP address corresponds to said first 

3 communication device. 

1 11. The method of claim 10, further including the step of associating a second 

2 IP address with said first IP address. 

1 12, The method of claim 10, further including the step of associating said first 

2 IP address by network address translation with one of a plurality of predefined addresses. 

1 13. The method of claim 10, wherein the step of assigning said first EP address 

2 is assigned by an access provider. 

1 14. The method of claim 10, wherein the step of assigning said first EP address 

2 is assigned dynamically from a plurality of predefined unassigned IP addresses. 
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1 15. The method of claim 10, further including the step of associating said first 

2 IP address by proxy with one of a plurality of predefined IP addresses. 

1 16. The method of claim 1 , wherein said step of accessing further includes the 

2 step of verifying, wherein a right to access is verified and the steps of specifying and 

3 establishing are implemented only after the right to access is verified. 

1 17. The method of claim 1, wherein the steps of accessing, specifying, 

2 associating and establishing are defined as a session, and wherein a plurality of sessions 

3 are implemented concurrently. 

1 18. The method of claim 1, fixrther including the step of monitoring, wherein 

2 the step of monitoring monitors the activity between said first communications device 

3 and said second communications device, and further including the step of terminating, 

4 wherein the step of terminating terminates connectivity after a predefined period of no 

5 activity. 
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1 1 9. A troubleshooting portal, comprising: 

2 means for providing access to a troubleshooting portal from a location associated 

3 with a first communication device; 

4 means for specifying to said troubleshooting portal a predefined identifier 

5 associated with said second communication device; 

6 means for associating said predefined identifier with said second communication 

7 device; and 

8 means for establishing connectivity between said first communication device and 

9 said second communication device based upon said specified predefined identifier, 

10 wherein said first communication device is in communication with said second 

1 1 communication device, said second communication device residing in an access provider 

1 2 communication system. 

1 20. The troubleshooting portal of claim 19, wherein said second 

2 communication device is an endpoint. 

1 21. The troubleshooting portal of claim 19, wherein said means for 

2 establishing connectivity fiirther includes means for actuating at least one switch such 

3 that a plurality of physical links associated with a pluraUty of data link connection 

4 identifiers (DCLIs) are coupled together. 



1 22. The troubleshooting portal of claim 21, wherein said means for actuating 

2 at least one switch fiirther includes means for actuating a digital subscriber loop access 

3 muhiplexer (DSLAM) connected to a plurahty of second communication devices such 

4 that said second communication device associated with said specified identifier is 

5 connected by said step of establishing connectivity. 

1 23. The troubleshooting portal of claim 19, wherein said means for 

2 establishing connectivity further includes means for routing data over a plurality of 

3 physical Unks associated with said predefined identifier. 
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1 24. The troubleshooting portal of claim 23, further including means for 

2 actuating a digital subscriber loop access multiplexer (DSLAM) connected to a plurality 

3 of second communication devices such that said second communication device associated 

4 with said specified identifier is connected by said means for establishing connectivity. 

1 25. The troubleshooting portal of claim 19, wherein said location is a site in a 

2 network service provider communication system. 

1 26. The troubleshooting portal of claim 19, wherein said location is a site in an 

2 access provider communication system. 

1 27. The troubleshooting portal of claim 19, wherein said means for associating 

2 further includes means for associating a predefined circuit identifier (ED) with said first 

3 coromunication device. 

1 28. The troubleshooting portal of claim 19, further including a means for 

2 assigning a first internet protocol (IP) address, wherein said first IP address corresponds 

3 to said first communication device. 

1 29. The troubleshooting portal of claim 28, further including a means for 

2 associating a second IP address with said first IP address. 

1 30. The troubleshooting portal of claim 28, further including means for 

2 associating said first ff address by network address translation with one of a plurality of 

3 predefined addresses. 

1 31. The troubleshooting portal of claim 28, wherein the means for assigning 

2 said first IP address is assigned by an access provider. 
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1 32. The troubleshooting portal of claim 28, wherein the means for assigning 

2 said first IP address is assigned dynamically from a plurality of predefined unassigned DP 

3 addresses. 

1 33. The troubleshooting portal of claim 28 , fiirther including a means for 

2 associating said first IP address by proxy with one of a plurality of predefined IP 

3 addresses. 

1 34. The troubleshooting portal of claim 19, wherein said means for accessing 

2 further includes a means for verifying^ wherein a right to access is verified and said 

3 means for selecting and establishing are implemented only after the right to access is 

4 verified. 

1 35. The troubleshooting portal of claim 19, wherein said means for accessing, 

2 specifying, associating and establishing is defined as a session, and further including a 

3 means for implementing a plurality of sessions concurrently. 

1 36. The troubleshooting portal of claim 19, further including a means for 

2 monitoring, wherein said means for monitoring monitors the activity of said first 

3 communications device and said second communications device, and further including a 

4 means for terminating, wherein said means for terminating terminates said connectivity 

5 after a predefined period of no activity. 



35 



TKHR Docket No. 061607-1390 



1 37. A troubleshooting portal for establishing connectivity between a first 

2 communication device and a second communication device, said second communication 

3 device residing in an access provider communication system, the troubleshooting portal 

4 comprising; 

5 a configuration module configured to establish connectivity between said first 

6 communication device and said second communication device; and 

7 a processor configured to instruct said configuration module; 

8 wherein a user initiates a session with said troubleshooting portal, and wherein said user 

9 specifies to said processor a predefined identifier associated with said second 

10 communication device such that said processor instructs said configuration module to 

11 establish connectivity between said first communication device and said second 

12 communication device based upon said predefined identifier. 

1 38. The troubleshooting portal of claim 37, wherein said second 

2 conomunication device is an endpoint. 

1 39, The troubleshooting portal of claim 37, wherein a portion of said access 

2 provider communication system is a fi:ame relay based communication system. 

1 40. The troubleshooting portal of claim 37, wherein a portion of said access 

2 provider communication system is an asynchronous transfer mode (ATM) based 

3 communication system. 

1 41. The troubleshooting portal of claim 37, wherein a portion of said access 

2 provider communication system is an internet protocol (IP) based communication system. 

1 42. The troubleshooting portal of claim 37, wherein a portion of said access 

2 provider communication system is a multiprotocol label switching (MPLS) based 

3 communication system. 
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1 43. The troubleshooting portal of claim 37, wherein said first communication 

2 device resides in a network service provider communication system. 

1 44. The troubleshooting portal of claim 37, wherein said first commiinication 

2 device resides in said access provider communication system. 

1 45. The troubleshooting portal of claim 37, fiirther comprising an address 

2 table residing in a memory in communication with said processor, said address table 

3 containing a predefined endpoint associated with said second communication device, and 

4 wherein said user specifies to said processor said endpoint. 



1 46. The troubleshooting portal of claim 45, wherein said address table 

2 contains a plurality of predefined endpoints associated respectively with a plurahty of 

3 second communication devices such that said user specifies to said processor one of said 

4 plurahty of endpoints. 



1 47. The trouble shooting portal of claim 45, wherein said address table 

2 contains data corresponding to a circuit map associated with said endpoint, and wherein 

3 said device configuration module instructs said switch to establish connectivity by 

4 interpreting said circuit map. 



1 48. The trouble shooting portal of claim 37, fiirther comprising an assigned 

2 internet protocol (IP) address location residing in a memory in communication with said 

3 processor, wherein said user specifies an IP address to be saved into said IP address 

4 location, and wherein said IP address is associated with said endpoint. 

1 49. The trouble shooting portal of claim 48, wherein said IP address is 

2 assigned by an access provider. 
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1 50. The trouble shooting portal of claim 48, further comprising a plurality of 

2 unassigned IP addresses, wherein said IP is assigned dynamically from said plurality of 

3 predefined unassigned IP addresses. 

1 51. The trouble shooting portal of claim 37, further comprising a secxmty 

2 function module configured to perform security verification wherein a right to access is 

3 verified, and wherein connectivity is established only after the right to access is verified. 

1 52. The trouble shooting portal of claim 37, further comprising a timing 

2 module wherein said timing circuit monitors activity between said first communication 

3 device connected to said second communication device, such that after a predefined 

4 period of inactivity said timing module terminates connectivity. 

1 53. The trouble shooting portal of claim 37, further comprising a digital 

2 subscriber loop access multiplexer (DSLAM) connected to a plurality of second 

3 communication devices such that said second conmiunication device associated with said 

4 specified predefined identifier is connected to said DSLAM and wherein said 

5 connectivity is established between said first communication device and said second 

6 communication device associated with said specified predefined identifier through said 

7 DSLAM. 
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1 54. Computer readable medium having a program for storing a series of 

2 instructions which connects a first communication device to a second communication 

3 device residing in an access provider communication system, the program for performing 

4 at least the following: 

5 interfacing with a user, said user residing in a location associated with said first 

6 communication device; 

7 receiving a predefined identifier fi*om said user, said predefined identifier being 

8 associated with said second communication device; and 

9 estabhshing connectivity between said first communication device and said 
1 0 second communication device based upon said predefined identifier. 

1 55. The computer readable medium of claim 54, wherein said series of 

2 instructions further includes associating a predefined circuit identifier (ID) with said 

3 predefined identifier. 

1 56. The computer readable medium of claim 54, wherein said predefined 

2 identifier is an endpoint, said endpoint corresponding to said second communication 

3 device. 

1 57. The computer readable medium of claim 54, wherein said series of 

2 instructions further includes associating a first internet protocol (IP) address with said 

3 predefined identifier. 

1 58. The computer readable medium of claim 57, wherein said series of 

2 instructions further includes a network address translation instruction wherein a second 

3 IP address is associated with said first JP address. 

1 59. The computer readable medium of claim 57, wherein said program further 

2 includes instructions for associating said first IP address by proxy with one of a plurality 

3 of predefined addresses. 



39 



TKHR Docket No. 061607-1390 



1 60. The computer readable medium of claim 54, wherein said program further 

2 includes instructions for verifying a right to access and said connectivity is established 

3 only after the right to access is verified. 

1 61. The computer readable medium of claim 54, wherein said series of 

2 instructions for accessing, receiving and estabhshing is defined as a session, and wherein 

3 said series of instructions fiirther includes allowing a plurality of sessions to be 

4 implemented concurrently. 
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ABSTRACT OF THE DISCLOSURE 

A troubleshooting portal allows an access provider to predefine, using an address 
table, a plurality of virtual circuits (VCs) associated with a plurality of endpoints that a 
5 network service provider (NSP) should have access to on an occasional or frequent basis. 

An NSP operator would first establish a session with the troubleshooting portal to request 
access to a desired endpoint. Then, an internet protocol (IP) address would be associated 
with the endpoint. In an alternative embodiment, the troubleshooting portal would verify 
that the NSP operator is authorized to access the requested endpoint. After authorization 

10 verification, the troubleshooting portal would instruct a switch or plurality of switches to 
couple the necessary physical hnks, as defined by a plurality of VCs defining the path 
between the NSP operator and the endpoint. Then, the NSP operator would conduct the 
necessary troubleshooting tests and other service functions with the endpoint. Alternative 
embodiments of a troubleshooting portal provide for a plurality of NSPs having access to 

1 5 a pluraUty of endpoints. A security feature employed by the troubleshooting portal would 

allow any particular NSP operator to have access only to those communication devices 
for which the operator is authorized to access, thereby preventing unauthorized access by 
other operators. Alternative embodiments of the troubleshooting portal would employ 
network address translation or a proxy system to associate IP addresses with the specified 

20 endpoint. 
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made on information and belief are believed to be true; and further that these statements were made with the 
knowledge that willfiil false statement and the like so made are punishable by fine or imprisonment, or both, 
under Section 1001 of Title 18 of the United States Code and that such willfUl false statements may 
jeopardize the validity of the application or any patent issued thereon. 



Inventor's Signature: 



Full Name of Second Inventor: Jwf Davis 




Date; 




Residence : 2011 Bavview Place^ Indian Rocks Beach, FL 33785 
Post Office Address: 2011 Bayview Place 



Citizenship: USA 



Docket No. 0616074390 



I hereby declare that all statements made herein of my own knowledge are true and that all statements 
made on information and belief are believed to be true; and further that these statements were made with the 
knowledge that willful false statement and the Uke so made are punishable by fine or imprisonment, or both, 
under Section 1001 of Title 18 of the United States Code and that such willfUl false statements may 
jeopardize the validity of the application or any patent issued thereon. 



Inventor's Signature: 




Full Name of Third Inventor: Charles X Mele 

Residence: 88 Marshall Road, Neshanic Station, NJ 08853 Citizenship: USA 

Post Office Address: 88 Marshall Road 

Neshanic Station, NJ 08853 



Docket No. 061607-1390 



I hereby declare that all statements made herein of my own knowledge are true and that all statements 
made on information and belief are believed to be true; and further that these statements were made with the 
knowledge that willful false statement and the like so made are punishable by fine or imprisonment, or both, 
under Section 1001 of Title 18 of the United States Code and that such willfhl false statements may 
jeopardize the validity of the application or any patent issued thereon. 



Inventor's Signature 




Date: 



Full Name of Fourth or Sole Inventor: Eric K> Vallone 
Residence: 10 Forest Avenue. Fair Haven, NJ 07704 



Citizenship : USA 



Post Office Address: 10 Forest Avenue 



Fair Haven. NJ 07704 



DocketNo. 061607-1390 



I hereby declare that all statements made herein of my own knowledge are true and that all statements 
made on information and belief are believed to be true; and further that these statements were made with the 
knowledge that willful false statement and the like so made are punishable by fine or imprisonment, or both, 
under Section 1001 of Title 18 of the United States Code and that such willful false statements may 
jeopardize the validity of the application or any patent issued fliereon. 



Liventor's Signature: 




Full Name of Fiflh Inventor: Michael J. Cripp s 

Residence: 273 Riverbrook Avenue, Lincroft, NJ 07738 Citizenship: USA 

Post Office Address: 273 Riverbrook Avenue 



Lincroft, NJ 07738 



Docket No. 061607-1390 



I hereby declare that all statements made herein of my own knowledge are true and that all statements 
made on information and belief are believed to be true; and further that these statements were made with the 
knowledge that willful false statement and the like so made are punishable by fine or impnsomnent, or both, 
under Section 1001 of Title 18 of the United States Code and that such willful false statements may 
jeopardize the validity of the application or any patent issued thereon. 



Inventor's Signature: 



Full Name of Sixth Inventor: Edward W. E&ndis 




Date: 



ftsidence: 31 Hevward Hills Drive. Holmdel. NJ 07733 

Post Office Address: 31 Hevwar d Hills Drive 

Holmdel. NJ 07733 



Citizenship: USA 



Docket No. 061607-1390 



I hereby declare that all statements made herein of my own knowledge are true and that all statements 
made on information and belief are believed to be true; and further that these statements were made with the 
knowledge that willful false statement and the like so made are punishable by fine or imprisonment, or both, 
under Section 1001 of Title 18 of the United States Code and that such willfUl false statements may 
jeopardize the validity of the application or any patent issued thereon. 



Inventor's Signature: 




Full Name of Seventh or Sole Inventor: Warren M> Bartlett 



Residence: 829 Hillside Drive. Palm Harbon FL 34683 
Post Office Address: 829 Hillside Drive 



Citizenship: USA 



Palm Harbor. FL 34683 



Docket No. 061607-1390 



I hereby declare that all statements made herein of my own knowledge are true and that all statements 
made on information and belief are believed to be true; and further that these statements were made with the 
knowledge that willful false statement and the like so made are punishable by fine or imprisonment, or both, 
under Section 1001 of Title 18 of the United States Code and that such willfbl false statements may 
jeopardize the validity of the application or any patent issued thereon. 



Inventor's Signature: Date: ^X^Al^t 9^ 



Full Name of Eighth Inventor: Roopali S. Paran jp e 



Residence: 4 Ten Broek Courts Bridgewater, NJ 08807 Citizenship: India 

Post Office Address: 4 Ten Broek Court 

Bridgewaten NJ 08807 



